diff --git a/test-requirements.txt b/test-requirements.txt
index b539b017..db816555 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -21,4 +21,4 @@ WebTest>=2.0.27 # MIT
 oslo.messaging>=5.29.0 # Apache-2.0
 
 # Bandit security code scanner
-bandit!=1.6.0,>=1.1.0 # Apache-2.0
+bandit!=1.6.0,>=1.1.0,<1.7.5 # Apache-2.0
diff --git a/tox.ini b/tox.ini
index ab4bee0a..50a5477c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -1,8 +1,6 @@
 [tox]
-minversion = 3.18.0
-skipsdist = True
-envlist = py37,pep8,releasenotes
-ignore_basepython_conflict = True
+minversion = 4.2.0
+envlist = py3,pep8,releasenotes
 
 [testenv]
 usedevelop = True
@@ -13,8 +11,8 @@ deps =
     -c{env:UPPER_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
     -r{toxinidir}/requirements.txt
     -r{toxinidir}/test-requirements.txt
-commands = stestr run {posargs}
-basepython = python3
+commands =
+  stestr run {posargs}
 
 [testenv:pep8]
 commands =